arned so much on so many subjects thanks to you.
* @byt3bl33d3r for CME (lots of inspiration and code comes from CME : https://github.com/byt3bl33d3r/CrackMapExec )
* All the Team at @LoginSecurite for their help in debugging my shity code (special thanks to @layno & @HackAndDo for that) Todo* Finish ADSync/ADConnect password extraction
* CREDHISTORY full extraction
* Extract windows Certificates
* Further analysis ADAL/msteams
* Implement Chrome Changeloggit clone https://github.com/login-securite/DonPAPI.git
cd DonPAPI
python3 -m pip install -r requirements.txt
python3 DonPAPI.py Download DonPAPI

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
You've Just Been Ransomed ... Now What?

Six crucial steps executives and IT teams should be prepared to take immediately after a ransomware attack.

Announcing IRISnet Bug Bounty Program IV

IRISnet (mainnet IRIS Hub) is about to upgrade with the integration of Terse IBC (TIBC) module and refactored NFT.Continue reading on IRISnet Blog »
Read more...

Thông báo Chương trình Bug Bounty IRISnet IV

IRISnet (mainnet IRIS Hub) sắp nâng cấp với việc tích hợp mô-đun Terse IBC (TIBC) và NFT được tái cấu trúc.Continue reading on Medium »
Read more...

Kali Linux Tutorials
Crawlergo : A Powerful Browser Crawler For Web Vulnerability Scanners

crawlergo is a browser crawler that uses chrome headlessmode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with intelligent JS event triggering, and collects as many entries exposed by the website as possible. The built-in URL de-duplication module filters out a large number of pseudo-static URLs, still maintains a fast parsing and crawling speed for large websites, and finally gets a high-quality collection of request results.

crawlergo currently supports the following features:

* chrome browser environment rendering
* Intelligent form filling, automated submission
* Full DOM event collection with automated triggering
* Smart URL de-duplication to remove most duplicate requests
* Intelligent analysis of web pages and collection of URLs, including javascript file content, page comments, robots.txt files and automatic Fuzz of common paths
* Support Host binding, automatically fix and add Referer
* Support browser request proxy
* Support pushing the results to passive web vulnerability scanners

Screenshot
https://blogger.googleusercontent.com/img/a/AVvXsEgLq1-4ACgJPrqGinDHnWA-JyLwc_B9ysgLdJTqK1LXqgW1UOM3a-8j3qrEj6OHsdlaYwa3wqMFVM3o5n-bP1RE1fsVIbAGz731_11NxBl-v3Ql8DIN3KU_Y7-kHua7ZKkqDtGO2TZ8dsiZrBvVGRTt_Wgl3QboHhF77AsDveMhlERrmdQUdsnGwevC=s2132
Installation

Please read and confirm disclaimer carefully before installing and using。

Build

cd crawlergo/cmd/crawlergo
go build crawlergo_cmd.go

* crawlergo relies only on the chrome environment to run, go to download for the new version of chromium, or just click to download Linux version 79.
* Go to download page for the latest version of crawlergo and extract it to any directory. If you are on linux or macOS, please give crawlergo executable permissions (+x).
* Or you can modify the code and build it yourself.

If you are using a linux system and chrome prompts you with missing dependencies, please see TroubleShooting below

Quick Start Go！

Assuming your chromium installation directory is /tmp/chromium/, set up 10 tabs open at the same time and crawl the testphp.vulnweb.com:

./crawlergo -c /tmp/chromium/chrome -t 10 http://testphp.vulnweb.com/

Using Proxy

./crawlergo -c /tmp/chromium/chrome -t 10 –request-proxy socks5://127.0.0.1:7891 http://testphp.vulnweb.com/

Calling crawlergo with python

By default, crawlergo prints the results directly on the screen. We next set the output mode to json, and the sample code for calling it using python is as follows:

#!/usr/bin/python3
#coding: utf-8
import simplejson
import subprocess
def main():
target = “http://testphp.vulnweb.com/”
cmd = [“./crawlergo”, “-c”, “/tmp/chromium/chrome”, “-o”, “json”, target]
rsp = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
output, error = rsp.communicate()
# “–[Mission Complete]–” is the end-of-task separator string
result = simplejson.loads(output.decode().split(“–[Mission Complete]–“)[1])
req_list = result[“req_list”]
print(req_list[0])
if name == ‘main’:
main()

Crawl Results

When the output mode is set to json, the returned result, after JSON deserialization, contains four parts:

* all_req_list： All requests found during this crawl task, containing any resource type from other domains.
* req_list：Returns the current domain results of this crawl task, pseudo-statically de-duplicated, without static resource links. It is a subset of all_req_list .
* all_domain_list：List of all domains found.
* sub_domain_list：List of subdomains found. Examples

crawlergo returns the full request and URL, which can be used in a variety of ways:
[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Domain-Protect : Protect Against Subdomain Takeover

* Domain-Protect scans Amazon Route53 across an AWS Organization for domain records vulnerable to takeover
* vulnerable domains in Google Cloud DNS can be detected by Domain Protect for GCP

deploy to security audit account
https://blogger.googleusercontent.com/img/a/AVvXsEj4eWqlSQ1BudjfekG-Np88RpvhMtoPGkNUm0lpCJrC23pgvLpFVPQweKnPGofzGmh9Oh6QMy3ElDBiM87TRlsqo1ynsRUlLd1Dbpn_dTfoo7qZ_7ZNr5V5eZV4L76_9Ttjh421ZfpGp1PuoDAukrecagJzSNZ00D1LBFNG9a3eqX3eyV_PxOmfLeWz=s1217
scan your entire AWS Organization
https://blogger.googleusercontent.com/img/a/AVvXsEh9QpEj7tSUWWGUVLNwXE4ksfS9CMb75uTEWEAzHvMbP5jsWUnjjF1Pf141mRyy2jbAyuL8FKlph400gFkY3ZPK-bQgoJyJal8w2t6hwVkfjz8SNyJFqfLk4XMMDxMxL0tTDXDNzTKlcjP61-MszXXKs3RQE6Oi_d3TrnelVY18yC5jEbWjbPNg6a7_=s1240
receive alerts by Slack or email
https://blogger.googleusercontent.com/img/a/AVvXsEjwqq4pdZqG9e7FL26QNnuxWmaOXj7EH5xNyCsG1feWqGtnn5Ae_wKfqVfbCd6cUY4O7-0WM3oMkr8OSbRlyBdvdYD_8wYH5HnJc7h7M1Evo8oaEWGWNG8mLII6qOeYDL7825Kh4dZMQfUAgqDFgipMjgYZ0GAGVjzYbtXnUjimcSM1uSEg-XDk61oU=s1654
or manually scan from your laptop
https://blogger.googleusercontent.com/img/a/AVvXsEg6B9vNVbzzstumACj9zM4qGy7DMnYE32ewjAkulm2_MQXcNKxE6OwcpWRl6IPfodUNoGcup-s2b38y9x9H9chTiPKJ0B1OmHChXid5imLy9vzQ6hATOq_PrX-ucrn-xreDc2gFz5nq-Qs6X3rCzFEaLTAg812aDXVhh98T42J3nAYSnYa3SArcosoG=s944
Subdomain Detection Functionality

Scans Amazon Route53 to identify:

* Alias records for CloudFront distributions with missing S3 origin
* CNAME records for CloudFront distributions with missing S3 origin
* ElasticBeanstalk Alias records vulnerable to takeover
* ElasticBeanstalk CNAMES vulnerable to takeover
* Registered domains with missing hosted zones
* Subdomain NS delegations vulnerable to takeover
* S3 Alias records vulnerable to takeover
* S3 CNAMES vulnerable to takeover
* Vulnerable CNAME records for Azure resources
* CNAME records for missing Google Cloud Storage buckets

Optional Additional Check

Turned off by default as it may result in Lambda timeouts for large organisations

* A records for missing storage buckets, e.g. Google Cloud Load Balancer with missing backend storage

To enable, create this Terraform variable in your tfvars file or CI/CD pipeline:

lambdas = [“alias-cloudfront-s3”, “alias-eb”, “alias-s3”, “cname-cloudfront-s3”, “cname-eb”, “cname-s3”, “ns-domain”, “ns-subdomain”, “cname-azure”, “cname-google”, “a-storage”]

Options

1. scheduled lambda functions with email and Slack alerts, across an AWS Organization, deployed using Terraform
2. manual scans run from your laptop or CloudShell, in a single AWS account

Notifications

* Slack channel notification per vulnerability type, listing account names and vulnerable domains
* Email notification in JSON format with account names, account IDs and vulnerable domains by subscribing to SNS topic

Requirements

* Security audit account within AWS Organizations
* Security audit read-only role with an identical name in every AWS account of the Organization
* Storage bucket for Terraform state file
* Terraform 1.0.x

Usage

* replace the Terraform state S3 bucket fields in the command below as appropriate
* for local testing, duplicate terraform.tfvars.example, rename without the .example suffix
* enter details appropriate to your organization and save
* alternatively enter Terraform variables within your CI/CD pipeline

terraform init -backend-config=bucket=TERRAFORM_STATE_BUCKET -backend-config=key=TERRAFORM_STATE_KEY -backend-config=region=TERRAFORM_STATE_REGION
terraform workspace new dev
terraform plan
terraform apply

AWS IAM Policies

For least privilege access control, example AWS IAM policies are provided:

* domain-protect audit policy – attach to domain-protect audit role in every AWS account
* domain-protect audit trust relationship for domain-protec[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Networkit : A Growing Open-Source Toolkit For Large-Scale Network Analysis

NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicore architectures. These are meant to compute standard measures of network analysis. NetworKit is focused on scalability and comprehensiveness. NetworKit is also a testbed for algorithm engineering and contains novel algorithms from recently published research (see list of publications below).

NetworKit is a Python module. High-performance algorithms are written in C++ and exposed to Python via the Cython toolchain. Python in turn gives us the ability to work interactively and a rich environment of tools for data analysis and scientific computing. Furthermore, NetworKit’s core can be built and used as a native library if needed. Requirements

You will need the following software to install NetworKit as a python package:

* A modern C++ compiler, e.g.: g++ (>= 6.1), clang++ (>= 3.9) or MSVC (>= 14.13)
* OpenMP for parallelism (usually ships with the compiler)
* Python3 (3.6 or higher is supported)
* Development libraries for Python3. The package name depends on your distribution. Examples:
* Debian/Ubuntu: apt-get install python3-dev* RHEL/CentOS: dnf install python3-devel* Windows: Use the official release installer from www.python.org
* Pip
* CMake version 3.6 or higher (Advised to use system packages if available. Alternative: pip3 install cmake)
* Build system: Make or Ninja
* Cython version 0.29 or higher (e.g., pip3 install cython) Install

In order to use NetworKit, you can either install it via package managers or build the Python module from source. Install via package manager

While the most recent version is in general available for all package managers, the number of older downloadable versions differ. pip

pip3 install [–user] networkit

conda (channel conda-forge)

conda config –add channels conda-forge
conda install networkit [-c conda-forge]

brew

brew install networkit

spack

spack install py-networkit

Building the Python module from source

git clone https://github.com/networkit/networkit networkit
cd networkit
python3 setup.py build_ext [-jX]
pip3 install -e .

The script will call cmakeand ninja(make as fallback) to compile NetworKit as a library, build the extensions and copy it to the top folder. By default, NetworKit will be built with the amount of available cores in optimized mode. It is possible the add the option -jNthe number of threads used for compilation. Usage Example

To get an overview and learn about NetworKit’s different functions/classes, have a look at our interactive notebooks-section, especially the Networkit UserGuide. Note: To view and edit the computed output from the notebooks, it is recommended to use Jupyter Notebook. This requires the prior installation of NetworKit. You should really check that out before start working on your network analysis.

We also provide a Binder-instance of our notebooks. To access this service, you can either click on the badge at the top or follow this link. Disclaimer: Due to rebuilds of the underlying image, it can takes some time until your Binder instance is ready for usage.

If you only want to see in short how NetworKit is used – the following example provides a climpse at that. Here we generate a random hyperbolic graph with 100k nodes and compute its communities with the PLM method:

import networkit as nk
g = nk.generators.HyperbolicGenerator(1e5).generate()
communities = nk.community.detectCommunities(g, inspect=True)
PLM(balan[...]

___________________________
@hacking_Attack
@Hacking_Video

* Used in conjunction with other passive web vulnerability scannersFirst, start a passive scanner and set the listening address to: http://127.0.0.1:1234/Next, assuming crawlergo is on the same machine as the scanner, start crawlergo and set the parameters:--push-to-proxy http://127.0.0.1:1234/
* Host binding (not available for high version chrome) (example)
* Custom Cookies (example)
* Regularly clean up zombie processes generated by crawlergo (example) , contributed by @ring04h Bypass headless detect

crawlergo can bypass headless mode detection by default.

https://intoli.com/blog/not-possible-to-block-chrome-headless/chrome-headless-test.html
https://blogger.googleusercontent.com/img/a/AVvXsEhUJnn28fH3Kwx6FXk90txEPS6_KxuXlhuOakB4U_7MjdJnbJkfEbXBpJ3x1b1p68S60_yqWJEnARgS0Fm8BHMwBdgE4y9fNNxmF8JRdHHfrXceimKURtJu6H5Vpq23pPkLAlNqjZivLl4cEh_83bws7deibsSE8LkLDysdU11EiXV66023SynqNtut=s546
TroubleShooting

* ‘Fetch.enable’ wasn’t foundFetch is a feature supported by the new version of chrome, if this error occurs, it means your version is too low, please upgrade the chrome version.
* chrome runs with missing dependencies such as xxx.so

// Ubuntu
apt-get install -yq –no-install-recommends \
libasound2 libatk1.0-0 libc6 libcairo2 libcups2 libdbus-1-3 \
libexpat1 libfontconfig1 libgcc1 libgconf-2-4 libgdk-pixbuf2.0-0 libglib2.0-0 libgtk-3-0 libnspr4 \
libpango-1.0-0 libpangocairo-1.0-0 libstdc++6 libx11-6 libx11-xcb1 libxcb1 \
libxcursor1 libxdamage1 libxext6 libxfixes3 libxi6 libxrandr2 libxrender1 libxss1 libxtst6 libnss3
// CentOS 7
sudo yum install pango.x86_64 libXcomposite.x86_64 libXcursor.x86_64 libXdamage.x86_64 libXext.x86_64 libXi.x86_64 \
libXtst.x86_64 cups-libs.x86_64 libXScrnSaver.x86_64 libXrandr.x86_64 GConf2.x86_64 alsa-lib.x86_64 atk.x86_64 gtk3.x86_64 \
ipa-gothic-fonts xorg-x11-fonts-100dpi xorg-x11-fonts-75dpi xorg-x11-utils xorg-x11-fonts-cyrillic xorg-x11-fonts-Type1 xorg-x11-fonts-misc -y
sudo yum update nss -y

Run prompt Navigation timeout / browser not found / don’t know correct browser executable path

Make sure the browser executable path is configured correctly, type: chrome://versionin the address bar, and find the executable file path:
https://blogger.googleusercontent.com/img/a/AVvXsEieZZm_piWBcJKMs3rbPb2flmQbkJu3AYVNuYCCGcpbReytwMUT77xgINvQ6IUWOUwdeITjzKNgciwbljGt7xjS1zDV47LCFYFYSIZ-EoL8bcir7Ny_LjYpkxSEsJJuWgVdSH6F-AXbCXM0yCkMiTej9MdlUvvAWiJeIUxJ-wTT4NaxJNwrmGiQ-9Tq=s579
Parameters Required parameters

* --chromium-path Path, -c PathThe path to the chrome executable. (Required) Basic parameters

* --custom-headers HeadersCustomize the HTTP header. Please pass in the data after JSON serialization, this is globally defined and will be used for all requests. (Default: null)
* --post-data PostData, -d PostDataPOST data. (Default: null)
* --max-crawled-count Number, -m NumberThe maximum number of tasks for crawlers to avoid long crawling time due to pseudo-static. (Default: 200)
* --filter-mode Mode, -f ModeFiltering mode, simple: only static resources and duplicate requests are filtered. smart: with the ability to filter pseudo-static. strict: stricter pseudo-static filtering rules. (Default: smart)
* --output-mode value, -o valueResult output mode, console: print the glorified results directly to the screen. json: print the json serialized string of all results. none: don’t print the output. (Default: console)
* --output-json filepathWrite the result to the specified file after JSON serializing it. (Default: null)
* --request-proxy proxyAddresssocks5 proxy address, all network requests from crawlergo and chrome browser are sent through the proxy. (Default: null) Expand input URL

* --fuzz-pathUse the built-in dictionar[...]

___________________________
@hacking_Attack
@Hacking_Video

t audit role in every AWS account
* domain-protect audit trust relationship with External ID for domain-protect audit role in every AWS account
* domain-protect deploy policy – attach to IAM group or role assumed by CI/CD pipeline

Adding New Checks

* create a new subdirectory within the terraform-modules/lambda/code directory
* add Python code file with same name as the subdirectory
* add the name of the file without extension to var.lambdasin variables.tf
* add a subdirectory within the terraform-modules/lambda/build directory, following the existing naming pattern
* add a .gitkeep file into the new directory
* update the .gitignore file following the pattern of existing directories
* apply Terraform

Adding Notifications To Extra Slack Channels

* add an extra channel to your slack_channels variable list
* add an extra webhook URL or repeat the same webhook URL to your slack_webhook_urls variable list
* apply Terraform

Testing

* use multiple Terraform workspace environments, e.g. dev, prd
* use the slack_channels_devvariable for your dev environment to notify a test Slack channel
* for new subdomain takeover categories, create correctly configured and vulnerable domain names in Route53
* minimise the risk of malicious takeover by using a test domain, with domain names which are hard to enumerate
* remove any vulnerable domains as soon as possible ci/cd

* infrastructure has been deployed using CircleCI
* environment variables to be entered in CircleCI project settings:
ENVIRONMENT VARIABLEEXAMPLE VALUE / COMMENTAWS_ACCESS_KEY_IDusing domain-protect deploy policyAWS_SECRET_ACCESS_KEY–TERRAFORM_STATE_BUCKETtfstate48903TERRAFORM_STATE_KEYdomain-protectTERRAFORM_STATE_REGIONus-east-1TF_VAR_org_primary_account012345678901TF_VAR_security_audit_role_namenot needed if “domain-protect-audit” usedTF_VAR_external_idonly required if External ID is configuredTF_VAR_slack_channels[“security-alerts”]TF_VAR_slack_channels_dev[“security-alerts-dev”]TF_VAR_slack_webhook_urls[“https://hooks.slack.com/services/XXX/XXX/XXX”]
* to validate an updated CircleCI configuration:

docker run -v pwd:/whatever circleci/circleci-cli circleci config validate /whatever/.circleci/config.yml Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Packet-Sniffer : A pure-Python Network Packet Sniffing Tool

Packet-Sniffer is a simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen.

This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter.

Installation

GNU / Linux

Simply clone this repository with git cloneand execute the packet_sniffer.pyfile as described in the following Usage section.

user@host:~/DIR$ git clone https://github.com/EONRaider/Packet-Sniffer.git

Other Systems

This project is dependent on PF_PACKET– a stateful packet filter not found on Windows or Mac OS X. For demonstration purposes, you can try out this package in a Docker container. Although it will not have full access to localhost on your machine, you can still sniff on the Docker subnet and at least get the module running.

Use this command to build and run from the project directory:

docker build -t sniff . && docker run –network host sniff

Note that the entry command is simply python packet_sniffer.py, so feel free to use the full functionality of the module by overriding the default command. Remember that we tagged the container with the name “sniff” before, so we can pass command-line arguments to the sniffer in the following manner:

docker run –network host sniff [your command goes here]
echo “Now let’s print help”
docker run –network host sniff python packet_sniffer.py –help

Usage of --network hostis not supported on OS X or Windows so this container won’t be fully functional – but you will see packets traveling within the docker subnet.

Usage

packet_sniffer.py [-h] [-i INTERFACE] [-d]
A pure-Python network packet sniffer.
optional arguments:
-h, –help show this help message and exit
-i INTERFACE, –interface INTERFACE
Interface from which packets will be captured (captures
from all available interfaces by default).
-d, –displaydata Output packet data during capture.

Running the Application
ObjectiveInitiate the capture of packets on all available interfacesExecutionsudo python3 packet_sniffer.pyOutcomeRefer to sample output below
Sample output:

[>] Packet #476 at 17:45:13:
[+] MAC ……ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9
[+] IPv4 ……….192.168.1.65 -> 140.82.113.3 | PROTO: TCP TTL: 64
[+] TCP ………………40820 -> 443 | Flags: 0x010 > ACK
[>] Packet #477 at 17:45:14:
[+] MAC ……dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a
[+] IPv4 ……….140.82.113.3 -> 192.168.1.65 | PROTO: TCP TTL: 49
[+] TCP ………………..443 -> 40820 | Flags: 0x010 > ACK
[>] Packet #478 at 17:45:18:
[+] MAC ……dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a
[+] ARP Who has 192.168.1.65 ? -> Tell 192.168.1.254
[>] Packet #479 at 17:45:18:
[+] MAC ……ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9
[+] ARP ………..192.168.1.65 -> Is at ae:45:39:30:8f:5a
Download

___________________________
@hacking_Attack
@Hacking_Video

ced,pc,turbo) detected communities in 0.14577102661132812 [s]
solution properties:
communities 4536
min community size 1
max community size 2790
avg. community size 22.0459
modularity 0.987243
——————- ———–

Install the C++ Core only

In case you only want to work with NetworKit’s C++ core, you can either install it via package managers or build it from source. Install C++ core via package manager conda (channel conda-forge)

conda config –add channels conda-forge
conda install libnetworkit [-c conda-forge]

brew

brew install libnetworkit

spack

spack install libnetworkit

Building the C++ core from source

We recommend CMake and your preferred build system for building the C++ part of NetworKit.

The following description shows how to use CMake in order to build the C++ Core only:

First you have to create and change to a build directory: (in this case named build)

mkdir build
cd build

Then call CMake to generate files for the makebuild system, specifying the directory of the root CMakeLists.txtfile (e.g., ..). After this makeis called to start the build process:

cmake ..
make -jX

o speed up the compilation with make a multi-core machine, you can append -jXwhere X denotes the number of threads to compile with. Use NetworKit as a library

This paragraph explains how to use the NetworKit core C++ library in case it has been built from source. For how to use it when installed via package managers, best refer to the official documentation (brew, conda, spack).

In order to use the previous compiled networkit library, you need to have it installed, and link it while compiling your project. Use these instructions to compile and install NetworKit in /usr/local:

cmake ..
make -jX install

Once NetworKit has been installed, you can use include directives in your C++-application as follows:

# include

You can compile your source as follows:

g++ my_file.cpp -lnetworkit

Unit Tests

Building and running NetworKit unit tests is not mandatory. However, as a developer you might want to write and run unit tests for your code, or if you experience any issues with NetworKit, you might want to check if NetworKit runs properly. The unit tests can only be run from a clone or copy of the repository and not from a pip installation. In order to run the unit tests, you need to compile them first. This is done by setting the CMake NETWORKI_BUILD_TESTSflag to ON:

cmake -DNETWORKIT_BUILD_TESTS=ON ..

Unit tests are implemented using GTest macros such as TEST_F(CentralityGTest, testBetweennessCentrality). Single tests can be executed with:

./networkit_tests –gtest_filter=CentralityGTest.testBetweennessCentrality

Additionally, one can specify the level of the logs outputs by adding --loglevel ; supported log levels are: TRACE, DEBUG, INFO, WARN, ERROR, and FATAL.

Compiling with address/leak sanitizers

Sanitizers are great tools to debug your code. NetworKit provides additional Cmake flags to enable address, leak, and undefined behavior sanitizers. To compile your code with sanitizers, set the CMake NETWORKIT_WITH_SANITIZERSto either addressor leak:

cmake -DNETWORKIT_WITH_SANITIZERS=leak ..

By setting this flag to address, your code will be compiled with the addressand the undefinedsanitizers. Setting it to leakalso adds the leaksanitizer. Download

___________________________
@hacking_Attack
@Hacking_Video

y for path fuzzing. (Default: false)
* --fuzz-path-dictCustomize the Fuzz path by passing in a dictionary file path, e.g. /home/user/fuzz_dir.txt, each line of the file represents a path to be fuzzed. (Default: null)
* --robots-pathResolve the path from the /robots.txt file. (Default: false) Form auto-fill

* --ignore-url-keywords, -iukURL keyword that you don’t want to visit, generally used to exclude logout links when customizing cookies. Usage: -iuk logout -iuk exit. (default: “logout”, “quit”, “exit”)
* --form-values, -fvCustomize the value of the form fill, set by text type. Support definition types: default, mail, code, phone, username, password, qq, id_card, url, date and number. Text types are identified by the four attribute value keywords id, name, class, typeof the input box label. For example, define the mailbox input box to be automatically filled with A and the password input box to be automatically filled with B, -fv mail=A -fv password=B.Where default represents the fill value when the text type is not recognized, as “Cralwergo”. (Default: Cralwergo)
* --form-keyword-values, -fkvCustomize the value of the form fill, set by keyword fuzzy match. The keyword matches the four attribute values of id, name, class, typeof the input box label. For example, fuzzy match the pass keyword to fill 123456 and the user keyword to fill admin, -fkv user=admin -fkv pass=123456. (Default: Cralwergo) Advanced settings for the crawling process

* --incognito-context, -iBrowser start incognito mode. (Default: true)
* --max-tab-count Number, -t NumberThe maximum number of tabs the crawler can open at the same time. (Default: 8)
* --tab-run-timeout TimeoutMaximum runtime for a single tab page. (Default: 20s)
* --wait-dom-content-loaded-timeout TimeoutThe maximum timeout to wait for the page to finish loading. (Default: 5s)
* --event-trigger-interval IntervalThe interval when the event is triggered automatically, generally used in the case of slow target network and DOM update conflicts that lead to URL miss capture. (Default: 100ms)
* --event-trigger-mode ValueDOM event auto-triggered mode, with asyncand sync, for URL miss-catching caused by DOM update conflicts. (Default: async)
* --before-exit-delayDelay exit to close chrome at the end of a single tab task. Used to wait for partial DOM updates and XHR requests to be captured. (Default: 1s) Other

* --push-to-proxyThe listener address of the crawler result to be received, usually the listener address of the passive scanner. (Default: null)
* --push-pool-maxThe maximum number of concurrency when sending crawler results to the listening address. (Default: 10)
* --log-levelLogging levels, debug, info, warn, error and fatal. (Default: info)
* --no-headlessTurn off chrome headless mode to visualize the crawling process. (Default: false) Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to ‘hijack’ someone else’s public IP address?

Like a lot of IT departments, the company I work for has an allow list of IP addresses to control who can access certain resources in our infrastructure. But how possible is it for an attacker to get their computer to assume one of those IP addresses and get access to all the stuff we’ve put that access control in for?

submitted by /u/jjsmyth1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cybercriminals claim to have hacked the NRA

https://external-preview.redd.it/5eRikPS1mX4dd4jAe0miI-f_ixgkRKfXddGv0MnE4bs.jpg?width=640&crop=smart&auto=webp&s=c1d057d3e65109f3709d6b8bb69ba1006f959c3a submitted by /u/jonfla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Most Efficient Passware Attacks?

submitted by /u/Coda1010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Forensic investigation assignment

I have a school project assignment to research and demonstrate forensic investigation on digital devices. Use of Autopsy software is not allowed

I have been thinking of a demonstration by infecting an android VM with "pegasus spyware" and using "Mobile Verification Toolkit" by mvt project

I have been trying to look for a way to either acquire pegasus or something similar but unable to find any.

would any experts here guide me a bit for this task or point me in the right direction ? thanks!

submitted by /u/banana-cognac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video